Net Transport eDonkey Protocol Stack Buffer Overflow Vulnerability

Bugtraq ID:	40617
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 02 2010 12:00AM
Updated:	Jan 02 2010 12:00AM
Credit:	Lincoln
Vulnerable:	Xi Software Net Transport 2.90.510 Xi Software Net Transport 2.89 Xi Software Net Transport 2.88 Xi Software Net Transport 2.86 Xi Software Net Transport 2.84a Xi Software Net Transport 2.84
Not Vulnerable:

Net Transport eDonkey Protocol Stack Buffer Overflow Vulnerability

Net Transport is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

Net Transport 2.90.510 is vulnerable; other versions may also be affected.

Net Transport eDonkey Protocol Stack Buffer Overflow Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/40617.py
• /data/vulnerabilities/exploits/40617.rb

Net Transport eDonkey Protocol Stack Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Net Transport eDonkey Protocol Stack Buffer Overflow Vulnerability

References:

• Net Transport Homepage (Xi Software)